What’s Vulnerable › Products

Hitachi Vantara Pentaho Data Integration & Analytics vulnerabilities

13 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 12 published in the last 12 months.

Check whether your Hitachi Vantara Pentaho Data Integration & Analytics version is affected

Latest Hitachi Vantara Pentaho Data Integration & Analytics vulnerabilities

• CVE-2025-24908 — Hitachi Vantara Pentaho Data Integration & Analytics – Path Traversal (CVSS 6.8)
• CVE-2025-24907 — Hitachi Vantara Pentaho Data Integration & Analytics – Path Traversal (CVSS 6.8)
• CVE-2025-0756 — Hitachi Vantara Pentaho Data Integration & Analytics - Improper Control of Resource Identifiers ('Resource Injection') (CVSS 9.1)
• CVE-2024-6697 — Hitachi Vantara Pentaho Business Analytics Server - Improper Handling of Insufficient Permissions or Privileges (CVSS 6.5)
• CVE-2024-6696 — Hitachi Vantara Pentaho Business Analytics Server - Insufficient Granularity of Access Control (CVSS 4.9)
• CVE-2024-37363 — Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization (CVSS 6.5)
• CVE-2024-37362 — Hitachi Vantara Pentaho Data Integration & Analytics - Insufficiently Protected Credentials (CVSS 6.3)
• CVE-2024-37361 — Hitachi Vantara Pentaho Business Analytics Server - Deserialization of Untrusted Data (CVSS 9.9)
• CVE-2024-5706 — Hitachi Vantara Pentaho Data Integration & Analytics - Improper Control of Resource Identifiers ('Resource Injection') (CVSS 8.8)
• CVE-2024-5705 — Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization (CVSS 8.8)
• CVE-2024-37360 — Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (CVSS 4.4)
• CVE-2024-37359 — Hitachi Vantara Pentaho Business Analytics Server – Server Side Request Forgery (CVSS 8.6)
• CVE-2024-28981 — Hitachi Vantara Pentaho Data Integration & Analytics - Insufficiently Protected Credentials (CVSS 8.5)